Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Nouvola DiveCloud Plugin — Jenkins Security Advisory 2025-07-09 Clear all filters
TI-2025-33595 CVE-2025-53671 · GHSA-4v4v-92cx-x4f4

Insufficiently protected credentials in Jenkins Nouvola DiveCloud Plugin

Priority LOW 28

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture th…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00212 Published 2025-07-09 No fix listed CWE-256
TI-2025-33594 CVE-2025-53670 · GHSA-45hr-8gq6-7f7f

Cleartext storage of sensitive information in Jenkins Nouvola DiveCloud Plugin

Priority LOW 28

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Exten…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00157 Published 2025-07-09 No fix listed CWE-312